@cursor/bdk 0.2.2 → 0.2.4

package/src/channels/slack/manifest.ts

@@ -1,240 +0,0 @@
-/**
- * Generate Slack app manifests (dev + prod) for Cursor-managed provision.
- *
- * Always Socket Mode. No Events Request URL. Humans do not paste these
- * at api.slack.com; `slack create` sends them through the dashboard wizard.
- *
- * Mirrored by backend/server/src/agentServe/agentServeSlackManifest.ts (the
- * backend cannot import this published package); keep the twins in lockstep.
- */
-
-import type { SlackManifestOptions } from "./types.js";
-
-/**
- * Dashboard tab root: Slack's app-settings banner, and the only OAuth
- * redirect URI we register. AAA request-approval (`oauth_authorize_url`)
- * 400s with redirect_uri mismatch unless a URI is registered. This is
- * not an install callback. `apps.managedInstall` still installs.
- */
-export const SLACK_EXTERNAL_APP_MANAGEMENT_URL = "https://cursor.com/dashboard/deployed-agents";
-
-export interface SlackAppManifest {
-  display_information: {
-    name: string;
-    description?: string;
-  };
-  features: {
-    bot_user: {
-      display_name: string;
-      always_online: boolean;
-    };
-    agent_view?: {
-      agent_description: string;
-      suggested_prompts: Array<{ title: string; message: string }>;
-    };
-    app_home?: {
-      home_tab_enabled: boolean;
-      messages_tab_enabled: boolean;
-      messages_tab_read_only_enabled: boolean;
-    };
-  };
-  oauth_config: {
-    scopes: {
-      bot: string[];
-    };
-    redirect_urls?: string[];
-  };
-  settings: {
-    event_subscriptions: {
-      bot_events: string[];
-    };
-    interactivity: {
-      is_enabled: boolean;
-    };
-    org_deploy_enabled: boolean;
-    socket_mode_enabled: boolean;
-    token_rotation_enabled: boolean;
-    is_mcp_enabled: boolean;
-    managed_app_settings?: {
-      is_install_from_slack_disabled: boolean;
-      external_app_management_url: string;
-    };
-  };
-}
-
-const BOT_SCOPES = [
-  "app_mentions:read",
-  "assistant:write",
-  "channels:history",
-  "chat:write",
-  "files:read",
-  "files:write",
-  "groups:history",
-  "im:history",
-  "im:read",
-  "im:write",
-  "mpim:history",
-  // Emoji acknowledgements (e.g. an agent reacting 👀 when it locks onto
-  // a watched-channel post before investigating).
-  "reactions:write",
-  "users:read",
-] as const;
-
-const BOT_EVENTS = [
-  "app_mention",
-  "message.im",
-  // agent_view DMs: Slack no longer fires assistant_thread_started.
-  "app_home_opened",
-] as const;
-
-/** Slack's display_information.description bound. */
-const MAX_DESCRIPTION_LENGTH = 140;
-const DESCRIPTION_SUFFIX = " — an AI agent built with Cursor";
-
-/** Marketplace review rejects managed apps whose manifest omits a description. */
-function defaultDescription(name: string): string {
-  const room = MAX_DESCRIPTION_LENGTH - DESCRIPTION_SUFFIX.length;
-  // Spread splits by code point: truncation cannot halve a surrogate pair.
-  return `${[...name].slice(0, room).join("")}${DESCRIPTION_SUFFIX}`;
-}
-
-function appSlug(name: string): string {
-  const base = name
-    .toLowerCase()
-    .replace(/[^a-zA-Z0-9_-]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 32);
-  return base.length > 0 ? base : "agent";
-}
-
-function isBennyApp(name: string): boolean {
-  return appSlug(name) === "benny";
-}
-
-function toBotDisplayName(name: string, env: "dev" | "prod"): string {
-  const fallback = appSlug(name);
-  // The Cursor Automations Benny already owns @benny in the Anysphere
-  // workspace, so the agent-serve Benny app must use @benny-dev in both
-  // envs (not only the usual -dev suffix on the dev profile).
-  if (fallback === "benny") {
-    return "benny-dev";
-  }
-  return env === "dev" ? `${fallback}-dev`.slice(0, 35) : fallback;
-}
-
-/**
- * Build a Slack app manifest suitable for Create from Manifest.
- */
-export function buildSlackManifest(options: SlackManifestOptions): SlackAppManifest {
-  const env = options.env;
-  const benny = isBennyApp(options.name);
-  // Benny's app title matches its handle so the Install App UI shows
-  // benny-dev (not "benny (dev)" / "Benny").
-  const displayName = benny ? "benny-dev" : env === "dev" ? `${options.name} (dev)` : options.name;
-  const botName = options.botDisplayName ?? toBotDisplayName(options.name, env);
-  const description = options.description ?? defaultDescription(options.name);
-  const agentDescription = options.agentDescription ?? description;
-  const includeAgentView = options.assistant !== false;
-
-  const botScopes = includeAgentView
-    ? [...BOT_SCOPES]
-    : BOT_SCOPES.filter(scope => scope !== "assistant:write");
-
-  const botEvents =
-    options.channelPosts === true
-      ? [...BOT_EVENTS, "message.channels", "message.groups"]
-      : [...BOT_EVENTS];
-
-  const suggested = options.suggestedPrompts !== undefined ? options.suggestedPrompts : [];
-
-  return {
-    display_information: {
-      name: displayName,
-      description,
-    },
-    features: {
-      bot_user: {
-        display_name: botName,
-        always_online: true,
-      },
-      app_home: {
-        home_tab_enabled: false,
-        messages_tab_enabled: true,
-        messages_tab_read_only_enabled: false,
-      },
-      agent_view: includeAgentView
-        ? {
-            agent_description: agentDescription,
-            suggested_prompts: suggested,
-          }
-        : undefined,
-    },
-    oauth_config: {
-      scopes: {
-        bot: botScopes,
-      },
-      redirect_urls:
-        options.managedByCursor === false ? undefined : [SLACK_EXTERNAL_APP_MANAGEMENT_URL],
-    },
-    settings: {
-      event_subscriptions: {
-        bot_events: botEvents,
-      },
-      interactivity: {
-        is_enabled: options.interactivity === true,
-      },
-      // Benny installs org-wide in the Cursor FE & ADM workspace.
-      org_deploy_enabled: benny,
-      // Always Socket Mode — agent-serve has no Events Request URL path.
-      // (Do not set false even if Slack's empty-app stub defaults to off.)
-      socket_mode_enabled: true,
-      token_rotation_enabled: false,
-      is_mcp_enabled: false,
-      ...(options.managedByCursor === false
-        ? {}
-        : {
-            managed_app_settings: {
-              is_install_from_slack_disabled: true,
-              external_app_management_url: SLACK_EXTERNAL_APP_MANAGEMENT_URL,
-            },
-          }),
-    },
-  };
-}
-
-export function buildSlackManifestPair(options: Omit<SlackManifestOptions, "env">): {
-  dev: SlackAppManifest;
-  prod: SlackAppManifest;
-} {
-  return {
-    dev: buildSlackManifest({ ...options, env: "dev" }),
-    prod: buildSlackManifest({ ...options, env: "prod" }),
-  };
-}
-
-/** Manifest filenames written under `.slack/`. */
-export function slackManifestFileEntries(
-  pair: { dev: SlackAppManifest; prod: SlackAppManifest },
-  env: "dev" | "prod" | "both" = "both",
-): ReadonlyArray<{
-  name: "manifest.dev.json" | "manifest.prod.json";
-  contents: string;
-}> {
-  const files: Array<{
-    name: "manifest.dev.json" | "manifest.prod.json";
-    contents: string;
-  }> = [];
-  if (env === "dev" || env === "both") {
-    files.push({
-      name: "manifest.dev.json",
-      contents: `${JSON.stringify(pair.dev, null, 2)}\n`,
-    });
-  }
-  if (env === "prod" || env === "both") {
-    files.push({
-      name: "manifest.prod.json",
-      contents: `${JSON.stringify(pair.prod, null, 2)}\n`,
-    });
-  }
-  return files;
-}

package/src/channels/slack/message-body.ts

@@ -1,82 +0,0 @@
-/**
- * Flatten a Slack message payload into readable text.
- *
- * Works on both raw Events API payloads and `conversations.*` API records.
- * Alert feeds (Datadog, PagerDuty, …) post with an empty top-level `text`
- * and put the whole notification in `attachments` / Block Kit `blocks`, so
- * anything reading `text` alone sees an empty message.
- */
-
-type JsonRecord = Record<string, unknown>;
-
-function asRecord(value: unknown): JsonRecord | null {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) {
-    return null;
-  }
-  return value as JsonRecord;
-}
-
-function asString(value: unknown): string | undefined {
-  return typeof value === "string" ? value : undefined;
-}
-
-/** Pull readable text out of Slack attachment / Block Kit payloads. */
-export function slackApiMessageBody(message: JsonRecord): string {
-  const parts: string[] = [];
-  const text = asString(message.text);
-  if (text !== undefined && text.trim() !== "") {
-    parts.push(text);
-  }
-
-  const attachments = Array.isArray(message.attachments) ? message.attachments : [];
-  for (const attachment of attachments) {
-    const rec = asRecord(attachment);
-    if (rec === null) {
-      continue;
-    }
-    for (const key of ["pretext", "title", "text", "fallback", "footer"] as const) {
-      const value = asString(rec[key]);
-      if (value !== undefined && value.trim() !== "") {
-        parts.push(value);
-      }
-    }
-    const titleLink = asString(rec.title_link);
-    if (titleLink !== undefined && titleLink.trim() !== "") {
-      parts.push(titleLink);
-    }
-  }
-
-  const blocks = Array.isArray(message.blocks) ? message.blocks : [];
-  for (const block of blocks) {
-    const rec = asRecord(block);
-    if (rec === null) {
-      continue;
-    }
-    const blockText = asRecord(rec.text);
-    const blockTextValue = asString(blockText?.text);
-    if (blockTextValue !== undefined && blockTextValue.trim() !== "") {
-      parts.push(blockTextValue);
-    }
-    const fields = Array.isArray(rec.fields) ? rec.fields : [];
-    for (const field of fields) {
-      const fieldRec = asRecord(field);
-      const fieldText = asString(fieldRec?.text);
-      if (fieldText !== undefined && fieldText.trim() !== "") {
-        parts.push(fieldText);
-      }
-    }
-  }
-
-  // Dedupe identical chunks (Datadog often repeats text/fallback across fields).
-  const seen = new Set<string>();
-  const deduped: string[] = [];
-  for (const part of parts) {
-    const trimmed = part.trim();
-    if (trimmed === "" || seen.has(trimmed)) {
-      continue;
-    }
-    seen.add(trimmed);
-    deduped.push(trimmed);
-  }
-  return deduped.join("\n");
-}

package/src/channels/slack/nudge-carrier.ts

@@ -1,224 +0,0 @@
-/**
- * Harness-side nudge carrier: a small Cursor hooks.json + script that drains
- * the durable Slack nudge store at tool boundaries (MCP / builtin tools).
- */
-
-import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import { join } from "node:path";
-
-export const SLACK_NUDGE_ROOT_REL = ".agent-serve/slack-nudge-root";
-export const SLACK_NUDGE_CONTINUATION_REL = ".agent-serve/slack-nudge-continuation";
-export const SLACK_NUDGE_CARRIER_REL = ".agent-serve/slack-nudge-carrier.mjs";
-/** Conversation allowed to claim nudges; subagents share the cwd and would otherwise take the parent's. */
-export const SLACK_NUDGE_OWNER_REL = ".agent-serve/slack-nudge-owner";
-
-/** Carrier script body — reads nudge-root + continuation, drains pending. */
-export const SLACK_NUDGE_CARRIER_SCRIPT: string = `#!/usr/bin/env node
-import { mkdir, readdir, readFile, rename, rm, writeFile } from "node:fs/promises";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const here = dirname(fileURLToPath(import.meta.url));
-const workspace = dirname(here);
-
-function safeKey(value) {
-  const trimmed = String(value ?? "").trim();
-  if (trimmed === "" || trimmed === "." || trimmed === "..") return "_empty";
-  const sanitized = trimmed
-    .replace(/[^a-zA-Z0-9._-]+/g, "_")
-    .replace(/^\\.+/, "")
-    .replace(/\\.+/g, "_")
-    .slice(0, 180);
-  if (sanitized === "" || sanitized === "." || sanitized === "..") return "_empty";
-  return sanitized;
-}
-
-async function readText(rel) {
-  try {
-    return (await readFile(join(workspace, rel), "utf8")).trim();
-  } catch {
-    return "";
-  }
-}
-
-async function readStdin() {
-  const chunks = [];
-  const read = (async () => {
-    for await (const chunk of process.stdin) chunks.push(chunk);
-  })().catch(() => {});
-  await Promise.race([
-    read,
-    new Promise((resolve) => setTimeout(resolve, 250).unref?.()),
-  ]);
-  process.stdin.destroy();
-  return Buffer.concat(chunks).toString("utf8");
-}
-
-/** First caller pins ownership; a subagent cannot call a tool before its parent's Task call. */
-async function ownsStore(caller) {
-  if (caller === "") return true;
-  const ownerPath = join(workspace, ${JSON.stringify(SLACK_NUDGE_OWNER_REL)});
-  try {
-    // wx is O_CREAT|O_EXCL, so creating the file is the claim: concurrent hooks cannot both win.
-    await writeFile(ownerPath, caller + "\\n", { encoding: "utf8", flag: "wx" });
-    return true;
-  } catch (error) {
-    if (error && error.code !== "EEXIST") return false;
-  }
-  // Claimed already — the only question left is whether we are the claimant.
-  const owner = await readText(${JSON.stringify(SLACK_NUDGE_OWNER_REL)});
-  return owner === "" || owner === caller;
-}
-
-async function main() {
-  const raw = await readStdin();
-  let caller = "";
-  try {
-    const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed.conversation_id === "string") {
-      caller = parsed.conversation_id.trim();
-    }
-  } catch {
-    // Fail open: an unparseable payload must not strand the follow-up.
-  }
-  const root = await readText(${JSON.stringify(SLACK_NUDGE_ROOT_REL)});
-  const continuation = await readText(
-    ${JSON.stringify(SLACK_NUDGE_CONTINUATION_REL)}
-  );
-  if (root === "" || continuation === "") {
-    process.stdout.write("{}\\n");
-    return;
-  }
-  // Not ours: leave it pending for the parent or the turn-boundary drain.
-  if (!(await ownsStore(caller))) {
-    process.stdout.write("{}\\n");
-    return;
-  }
-  const pendingDir = join(root, safeKey(continuation), "pending");
-  const deliveredDir = join(root, safeKey(continuation), "delivered");
-  let names = [];
-  try {
-    names = await readdir(pendingDir);
-  } catch {
-    process.stdout.write("{}\\n");
-    return;
-  }
-  const nudges = [];
-  await mkdir(deliveredDir, { recursive: true });
-  for (const name of names) {
-    if (!name.endsWith(".json")) continue;
-    const pendingPath = join(pendingDir, name);
-    let record;
-    try {
-      record = JSON.parse(await readFile(pendingPath, "utf8"));
-    } catch {
-      continue;
-    }
-    const sourceTs = typeof record.sourceTs === "string" ? record.sourceTs : "";
-    if (sourceTs === "") continue;
-    const dest = join(deliveredDir, safeKey(sourceTs));
-    try {
-      await readFile(dest, "utf8");
-      await rm(pendingPath, { force: true });
-      continue;
-    } catch {
-      // not delivered yet
-    }
-    const tmp = dest + "." + process.pid + ".tmp";
-    try {
-      await writeFile(tmp, JSON.stringify(record) + "\\n", "utf8");
-      await rename(tmp, dest);
-      await rm(pendingPath, { force: true });
-      nudges.push(record);
-    } catch {
-      await rm(tmp, { force: true }).catch(() => {});
-      await rm(pendingPath, { force: true }).catch(() => {});
-    }
-  }
-  if (nudges.length === 0) {
-    process.stdout.write("{}\\n");
-    return;
-  }
-  const lines = [
-    "<slack_followup>",
-    "New Slack follow-up(s) arrived while you were working. Incorporate them before your final reply. If an ask was already answered in-thread, ack briefly instead of re-answering.",
-    "",
-  ];
-  for (const nudge of nudges) {
-    const who =
-      typeof nudge.author === "string" && nudge.author !== ""
-        ? nudge.author
-        : "someone";
-    lines.push("- " + who + " @ " + nudge.sourceTs + ":");
-    lines.push(
-      typeof nudge.text === "string" && nudge.text.trim() !== ""
-        ? nudge.text.trim()
-        : "(empty)"
-    );
-    lines.push("");
-  }
-  lines.push("</slack_followup>");
-  process.stdout.write(
-    JSON.stringify({ additional_context: lines.join("\\n").trimEnd() }) + "\\n"
-  );
-}
-
-main().catch(() => {
-  process.stdout.write("{}\\n");
-});
-`;
-
-type HooksConfig = {
-  version?: number;
-  hooks?: Record<string, Array<{ command: string; failClosed?: boolean }>>;
-};
-
-/**
- * Write carrier script + pointer files and ensure pre/postToolUse hooks invoke it.
- * Safe to call every turn (idempotent overwrite of carrier + pointers).
- */
-export async function materializeSlackNudgeCarrier(args: {
-  harnessCwd: string;
-  nudgeRootDir: string;
-  continuationKey: string;
-}): Promise<void> {
-  if (args.continuationKey.trim() === "") {
-    return;
-  }
-  await mkdir(join(args.harnessCwd, ".agent-serve"), { recursive: true });
-  await mkdir(join(args.harnessCwd, ".cursor"), { recursive: true });
-  await writeFile(join(args.harnessCwd, SLACK_NUDGE_ROOT_REL), `${args.nudgeRootDir}\n`, "utf8");
-  await writeFile(
-    join(args.harnessCwd, SLACK_NUDGE_CONTINUATION_REL),
-    `${args.continuationKey}\n`,
-    "utf8",
-  );
-  await writeFile(
-    join(args.harnessCwd, SLACK_NUDGE_CARRIER_REL),
-    SLACK_NUDGE_CARRIER_SCRIPT,
-    "utf8",
-  );
-  await rm(join(args.harnessCwd, SLACK_NUDGE_OWNER_REL), { force: true });
-
-  const hooksPath = join(args.harnessCwd, ".cursor", "hooks.json");
-  let existing: HooksConfig = { version: 1, hooks: {} };
-  try {
-    existing = JSON.parse(await readFile(hooksPath, "utf8")) as HooksConfig;
-  } catch {
-    // fresh
-  }
-  const hooks = { ...(existing.hooks ?? {}) };
-  const command = `node ${SLACK_NUDGE_CARRIER_REL}`;
-  for (const step of ["preToolUse", "postToolUse"] as const) {
-    const list = [...(hooks[step] ?? [])].filter(
-      entry => !entry.command.includes("slack-nudge-carrier"),
-    );
-    list.push({ command, failClosed: false });
-    hooks[step] = list;
-  }
-  const next: HooksConfig = {
-    version: existing.version ?? 1,
-    hooks,
-  };
-  await writeFile(hooksPath, `${JSON.stringify(next, null, 2)}\n`, "utf8");
-}